Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4809FC48B69111ED8D00F0B4F1222468.roa
File:                     4809FC48B69111ED8D00F0B4F1222468.roa (raw, json)
Hash identifier:          UoZBQ+7qSumizjx960mCCqt1pn1FZMR0c2JOMHfMLh0=
Subject key identifier:   27:36:A2:66:1C:00:FE:28:63:65:58:69:48:6C:53:50:81:BF:9F:23
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       0C40
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4809FC48B69111ED8D00F0B4F1222468.roa
Signing time:             Mon 27 Feb 2023 11:24:21 +0000
ROA not before:           Mon 27 Feb 2023 11:24:18 +0000
ROA not after:            Thu 27 Feb 2025 11:24:18 +0000
asID:                     61317
IP address blocks:        154.16.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3136 (0xc40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Feb 27 11:24:18 2023 GMT
            Not After : Feb 27 11:24:18 2025 GMT
        Subject: CN=63fc92e5-fd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a8:9d:7b:e4:00:b2:7d:1d:ae:27:9c:f6:8e:
                    f1:01:59:0a:6e:5b:84:f5:6e:72:38:60:54:49:61:
                    b5:04:c2:ab:27:a8:0d:18:f5:4c:83:ef:72:85:3b:
                    c5:a6:b3:25:2e:25:33:48:27:c9:4a:9a:a3:32:00:
                    bc:1b:03:a0:6f:1d:e0:e3:8d:e6:11:8d:0f:09:44:
                    37:11:68:11:35:c7:9a:84:c9:61:e0:c7:67:5f:27:
                    4c:4a:06:55:df:d0:20:1c:0d:e5:fb:7f:4f:08:d0:
                    84:5b:6f:af:09:c8:5b:52:02:7e:1c:87:e8:63:52:
                    c7:ed:5e:3a:ed:26:93:73:19:5e:7a:3a:63:7c:42:
                    b6:64:63:85:8e:ed:59:73:ef:b0:97:85:e1:b0:da:
                    c8:92:54:4d:98:95:25:7b:99:fb:13:35:9f:db:92:
                    23:3b:38:c3:4e:2e:1f:cf:06:3b:33:b8:89:42:9b:
                    a2:13:67:7d:d0:aa:48:bb:c4:c1:2c:c2:fd:e4:e4:
                    0f:8d:b5:56:66:7d:8e:80:e5:76:72:4f:65:02:e6:
                    f9:ee:57:33:30:3e:80:31:4f:be:75:da:5d:9d:50:
                    8b:70:d9:5c:5f:25:70:8c:1f:9e:4e:bf:28:58:8d:
                    8a:d3:a2:2b:ed:11:13:22:95:02:50:e5:ab:48:3e:
                    96:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:36:A2:66:1C:00:FE:28:63:65:58:69:48:6C:53:50:81:BF:9F:23
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/4809FC48B69111ED8D00F0B4F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:40:74:69:5c:73:33:0c:31:20:a0:56:67:39:8e:1e:20:7b:
         e6:79:ac:2a:97:c3:17:e3:24:ea:23:03:cb:25:c0:8b:68:36:
         a5:32:ca:44:65:bf:1e:67:6f:22:19:88:1c:de:bd:65:0b:bc:
         20:f1:a2:8f:85:88:47:a3:0d:2f:48:03:9c:85:b1:cd:f4:b9:
         e7:7b:d2:41:66:e1:bc:81:98:4b:2d:fb:1f:3d:90:14:68:11:
         21:2d:30:b2:9b:96:a6:9b:12:06:f4:52:6e:2a:20:7b:56:a0:
         98:8e:50:ef:52:61:dc:db:91:02:56:a3:89:23:17:31:e9:8d:
         b5:00:92:d1:cc:00:61:81:65:9f:93:ee:ae:69:db:78:94:cb:
         c2:17:76:41:d1:11:49:7e:09:06:fc:5c:07:da:9c:ec:02:81:
         2b:5b:2b:e8:f4:52:df:cf:eb:42:e6:43:98:4e:fd:41:19:01:
         32:78:bf:21:e7:e9:c9:d5:3d:13:b6:b3:77:ba:b9:e2:d5:cd:
         6f:35:40:31:5c:f7:9e:54:60:7d:59:02:93:09:83:2c:46:b0:
         df:e6:e7:a2:ba:d7:99:7e:9f:6c:85:b6:cd:8a:c8:47:13:0f:
         60:f5:f3:2d:50:76:5d:f8:b9:ad:fd:09:7a:57:e7:77:09:db:
         6f:ae:f7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:58 2023 by rpki-client on console-ams.rpki-client.org